Which regulatory agencies enforce this type of clause?

{'agency': 'State_AG', 'reason': 'The California AG and CPPA enforce CPRA requirements to honour Global Privacy Control opt-out signals, which are distinct from but related to Do Not Track.', 'complaint_url': 'https://www.naag.org/find-my-ag/'}

What is the severity of this clause?

ConductAtlas classifies this No Do Not Track Response clause as low severity. Severity reflects the magnitude of rights affected, the breadth of users impacted, and the degree of discretion the platform retains.

No Do Not Track Response — Luma AI

Share 𝕏 Share in Share 🔒 PDF

What it is

Luma ignores Do Not Track signals sent by your browser, meaning browser-level privacy settings requesting no tracking are not honoured by the platform.

Consumer impact (what this means for users)

Even if you enable Do Not Track in your browser, Luma will continue to collect usage data, device information, and tracking cookies — your browser privacy setting has no effect on Luma's data collection.

Cross-platform context

See how other platforms handle No Do Not Track Response and similar clauses.

Compare across platforms →

Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

While there is no legal requirement to honour Do Not Track signals in most jurisdictions, this disclosure confirms that Luma actively disregards user-expressed tracking preferences at the browser level.

View original clause language

Do Not Track. Some Internet browsers may be configured to send "Do Not Track" signals to the online services that you visit. There is no accepted standard on how to respond to "Do Not Track" signals, and we do not respond to such signals.

Institutional analysis (Compliance & legal intelligence)

(1) REGULATORY FRAMEWORK: This provision implicates California's CalOPPA (California Online Privacy Protection Act, Bus. & Prof. Code §22575-22579), which requires disclosure of how a service responds to Do Not Track signals but does not mandate honouring them; GDPR ePrivacy Directive where browser settings may constitute user consent signals; Global Privacy Control (GPC) which California's CPRA §1798.135 requires businesses to honour as an opt-out signal — distinct from Do Not Track but related. Enforced by California AG and CPPA. (2)

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Applicable agencies

State AG

The California AG and CPPA enforce CPRA requirements to honour Global Privacy Control opt-out signals, which are distinct from but related to Do Not Track.
File a complaint →

Provision details

Document information

Document

Luma AI Privacy Policy

Entity

Luma AI

Document last updated

April 29, 2026

Tracking information

First tracked

April 30, 2026

Last verified

April 30, 2026

Record ID

CA-P-004294

Document ID

CA-D-00497

Evidence Provenance

Source URL

https://lumalabs.ai/legal/privacy-policy

Wayback Machine

View archived versions →

SHA-256

67674aa1a904b7c68bd20d464b6be4c1e518b1fe7e03c01dfdb4e87cfd26cb78

Verified

✓ Snapshot stored ✓ Change verified

How to Cite

ConductAtlas Policy Archive
Entity: Luma AI | Document: Luma AI Privacy Policy | Record: CA-P-004294
Captured: 2026-04-30 07:54:18 UTC | SHA-256: 67674aa1a904b7c6…
URL: https://conductatlas.com/platform/luma-ai/luma-ai-privacy-policy/no-do-not-track-response/
Accessed: May 2, 2026

Classification

Severity

Low

No Do Not Track Response